Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e33372e302e302f32302d3234203d3e20323632343632.roa
File:                     3137372e33372e302e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          41Rv9e7zFvrq6ghuAecCeFoa0Q2eQK3kSNNd2V94aL4=
Subject key identifier:   58:05:F2:08:10:2D:57:D0:4C:2B:23:FF:3F:2A:67:85:E4:E4:AE:54
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       5A5A4403EC8ABCCA06964FCC4D5D3D8A859DD66D
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e33372e302e302f32302d3234203d3e20323632343632.roa
Signing time:             Mon 21 Oct 2024 16:02:28 +0000
ROA not before:           Mon 21 Oct 2024 15:57:28 +0000
ROA not after:            Mon 20 Oct 2025 16:02:28 +0000
asID:                     262462
IP address blocks:        177.37.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5a:44:03:ec:8a:bc:ca:06:96:4f:cc:4d:5d:3d:8a:85:9d:d6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Oct 21 15:57:28 2024 GMT
            Not After : Oct 20 16:02:28 2025 GMT
        Subject: CN=5805F208102D57D04C2B23FF3F2A6785E4E4AE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:6e:bc:6f:07:ca:fe:74:78:be:ab:a3:65:
                    5b:5a:30:be:19:15:5a:3f:b9:22:31:41:9c:b0:ec:
                    75:51:9f:87:23:17:97:bd:fd:1a:91:a5:b0:f6:3a:
                    d5:9c:5d:20:b3:08:dd:2b:9c:b7:43:3b:02:ee:e8:
                    3f:f4:d8:08:ae:6d:9e:0e:28:b0:7d:c6:4d:dc:7f:
                    69:d1:77:1b:09:f5:38:d5:ff:e1:be:62:eb:34:cc:
                    ec:e8:ff:32:21:85:b3:24:0f:cc:a8:cf:b7:b0:1d:
                    7e:65:ca:d6:84:68:a5:52:4b:40:7c:f2:24:a2:f9:
                    78:0c:6a:7a:ce:4d:3f:7a:48:02:52:71:d3:d3:c1:
                    4f:ac:d8:c9:1a:48:23:c8:87:fd:26:63:f8:a7:73:
                    f3:58:f5:31:b4:e5:6b:59:f9:17:1f:10:82:38:57:
                    f1:b6:84:40:ac:f1:86:0a:47:6b:be:08:4f:ce:3d:
                    45:a9:06:c4:04:a2:80:fd:b5:04:69:34:aa:7d:17:
                    fb:2d:1b:7a:61:b5:73:7b:bb:f9:31:8c:53:00:0f:
                    87:ea:83:54:44:a7:a3:10:8e:b4:65:41:3e:1c:c7:
                    7d:f2:98:9e:e9:3e:fc:bf:08:f5:05:9a:c3:93:84:
                    3e:b7:01:e3:27:a5:92:ce:02:d3:56:ef:24:86:72:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:F2:08:10:2D:57:D0:4C:2B:23:FF:3F:2A:67:85:E4:E4:AE:54
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e33372e302e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:95:26:f7:cc:98:e5:79:d3:c4:d7:0f:f5:0d:41:c3:27:b3:
         4d:8d:f8:b1:06:8d:ed:67:e5:86:40:cf:ca:f8:9a:91:f1:d8:
         e5:81:31:eb:f0:8b:56:21:9d:55:5e:5b:18:6e:87:81:42:75:
         6f:4e:17:e3:5a:c7:c7:96:48:42:7f:2f:28:1a:1b:1c:4e:ae:
         a4:4a:99:96:19:44:4c:08:dc:06:97:01:7e:a3:22:ac:6b:9c:
         e0:f9:f2:10:8b:33:4d:db:b6:4f:c3:da:32:8e:1f:d4:d4:db:
         65:ae:a9:0d:17:3f:d2:76:ee:da:ac:a3:50:e2:7e:f7:c2:85:
         94:bb:31:2a:5a:f5:ee:10:04:2a:15:2a:e1:d2:d3:91:9e:89:
         40:2d:cb:65:51:d4:d8:fe:8c:e6:05:a4:9d:93:8e:0f:52:2c:
         5b:94:ce:12:87:f8:02:58:b6:a1:1b:44:22:65:14:25:23:6f:
         1f:75:9f:0e:e7:47:dc:47:e0:a2:3f:2b:c1:c4:2e:63:96:d1:
         e8:b7:b3:a2:c3:d9:25:71:60:47:49:ba:7c:a9:83:df:2b:07:
         98:08:f8:7b:26:2e:98:7f:5e:60:c8:37:d8:f2:28:72:c3:51:
         01:d1:a8:65:cb:70:ec:62:81:7c:8a:38:f2:60:eb:e9:c0:76:
         07:3e:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org